Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3e617b0-0345-3ce3-81f8-2d573a5d940d.roa
File:                     c3e617b0-0345-3ce3-81f8-2d573a5d940d.roa (raw, json)
Hash identifier:          iuMGPpLE5kL68QdseiRcAhSMZGf5MI83IaNM59LQ7Ng=
Subject key identifier:   E7:73:C3:B1:AE:E6:54:BA:67:32:FE:6C:BC:F1:02:F0:E2:7E:99:C1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858487CEB75D330A201B44796F6C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3e617b0-0345-3ce3-81f8-2d573a5d940d.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        23.44.172.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:75:d3:30:a2:01:b4:47:96:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=701a940b-8ae4-4986-9cd2-aa68f0326171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:ce:f6:9f:e4:b5:00:16:e7:21:31:df:97:
                    b6:1f:77:2b:21:db:9a:db:0e:ca:12:d9:1c:66:9e:
                    aa:50:a3:44:bf:67:fb:68:5d:2e:98:35:80:2f:b6:
                    6b:ce:7d:da:8b:95:cb:d5:58:eb:19:d1:b7:8d:ab:
                    65:7b:2b:20:8b:d8:0c:0e:39:2a:60:9d:96:11:50:
                    9f:2d:57:4e:5b:2c:7e:3f:74:8c:13:17:78:80:37:
                    0c:d8:be:d8:1f:3f:dd:04:4a:35:7f:70:f3:8d:20:
                    b8:8f:b7:e8:c2:01:1c:b5:0f:72:b3:7b:59:72:07:
                    5f:38:eb:11:f8:3e:0c:25:67:d4:c2:59:51:bd:19:
                    d0:74:e1:3b:fb:b1:1c:0e:14:72:9c:d5:f1:fe:45:
                    7b:87:aa:d9:e6:c4:cf:39:07:52:62:70:be:25:74:
                    43:dd:26:c2:ae:94:95:d2:2d:30:a3:32:75:98:44:
                    1c:80:91:4b:ea:70:09:0d:cf:8d:16:57:63:26:09:
                    97:e8:bb:ef:73:5b:18:b4:08:16:7e:4a:52:80:69:
                    dc:3f:2d:6a:65:0b:2c:7a:96:7f:c0:42:69:85:0b:
                    92:ad:73:56:da:44:ee:7a:3e:c2:62:8f:ce:68:24:
                    36:9d:91:43:49:00:1c:2f:91:e3:3b:48:45:c5:24:
                    52:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:73:C3:B1:AE:E6:54:BA:67:32:FE:6C:BC:F1:02:F0:E2:7E:99:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3e617b0-0345-3ce3-81f8-2d573a5d940d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:5e:b5:06:f3:d6:f5:3f:ef:e5:7b:9c:97:68:09:a9:1d:05:
         d9:ca:05:df:be:f5:ae:49:9e:23:b7:a6:6d:b4:c4:e4:9d:5c:
         92:7f:3a:0f:1c:9a:e6:a6:c5:5f:2a:18:df:94:b0:6d:de:31:
         eb:6e:99:57:a2:b8:04:9e:b5:23:73:fa:88:e4:45:2a:60:5b:
         7d:20:c2:23:9f:3c:99:e7:7d:e3:b9:18:a0:7f:15:8b:67:bf:
         0a:a0:37:6e:bf:82:45:8c:6b:d2:85:53:94:4f:86:a6:4a:7e:
         ac:15:f6:73:52:5e:5f:7d:4e:ba:19:56:27:61:f2:14:a9:af:
         eb:50:88:7c:7f:c2:86:9b:ff:1b:51:9c:99:32:91:85:92:f4:
         d0:58:9f:24:6e:b2:d3:29:92:00:4e:b9:8f:67:9c:e2:2c:f9:
         65:26:0f:f8:51:44:db:7e:d8:54:e1:90:79:f4:ea:78:f1:7d:
         c9:8f:dc:a5:b1:23:56:89:6f:f7:2d:13:2d:6c:42:79:9c:bc:
         db:cc:60:64:be:40:50:dc:1e:ae:2f:5b:8d:7b:97:9e:c5:83:
         4b:c4:be:68:55:eb:d5:a9:d4:16:4a:e9:7d:a1:d1:ae:30:4a:
         3a:23:12:29:f1:08:5c:48:ae:91:af:57:a9:d6:e1:55:1d:bf:
         54:7f:95:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:25 2025 by rpki-client